What’s Vulnerable › Vulnerabilities

CVE-2020-3260: Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-15 · updated 2026-06-17
• Weakness: CWE-399

Description

A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.

Affected products

• Cisco Aironet 1542D Firmware: 8.9(100.0)
• Cisco Aironet 1542I Firmware: 8.9(100.0)
• Cisco Aironet 1815 Firmware: 8.9(100.0)
• Cisco Aironet 1830 Firmware: 8.9(100.0)
• Cisco Aironet 1840 Firmware: 8.9(100.0)
• Cisco Aironet 1850 Firmware: 8.9(100.0)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-dos-5ZLs6ESz
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-dos-5ZLs6ESz

Get alerted when CVE-2020-3260 or the next vulnerability affects your stack